$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d87302c9-db28-3039-b6ef-9892b8708aa4.roa File: d87302c9-db28-3039-b6ef-9892b8708aa4.roa (raw, json) Hash identifier: B3WaeOIRRFSzbYyHO+ArVRWTaNXDcxJN2bFJyVTejyI= Subject key identifier: 48:57:C1:9E:D1:4B:9E:0C:D9:D0:07:F4:9D:A1:E3:52:90:97:A5:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D17F672F388AF79679060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d87302c9-db28-3039-b6ef-9892b8708aa4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.52.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:17:f6:72:f3:88:af:79:67:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=218b0729-7dce-45c0-afa7-535bc29e9763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:76:16:6b:00:f2:9f:8a:86:8f:db:85:25: 55:95:c7:c7:dc:1c:0c:92:fd:47:98:ff:a9:2a:e2: 31:d8:56:78:26:23:d2:36:82:ba:8b:a3:86:e5:af: 60:d7:a6:33:f6:43:f1:86:2e:6c:fe:37:91:e0:2b: a3:e9:3f:e6:30:c5:6a:18:a9:83:c4:bd:c2:a1:cb: c4:04:6d:cd:07:98:d1:93:1a:88:80:ec:65:1d:62: a6:e9:ac:9f:15:e6:83:47:c7:18:13:b1:26:9a:01: 76:fa:f1:46:6f:2e:10:e9:0f:9d:86:72:ae:39:cb: bb:ca:46:0e:95:7b:08:11:7c:ce:ab:c1:0c:71:1f: f5:31:f2:54:3c:06:6e:1a:fe:ad:89:f0:ab:38:fe: c8:02:06:25:5e:e2:eb:0f:05:8f:19:be:85:ed:06: f9:4b:99:20:34:29:06:f5:89:bb:83:08:fa:05:29: 7e:85:d4:b2:59:51:a6:3f:7c:7e:bd:5c:52:5b:06: cb:c8:3e:2d:47:fa:3b:46:b1:24:e3:08:90:44:5f: 09:3a:f1:ab:db:3d:a8:30:4a:8d:d6:99:e0:58:ed: 7a:e2:47:c4:8d:fa:b7:b1:3f:76:94:37:4d:33:2f: 10:c0:88:4b:74:fc:99:39:ab:76:ae:db:67:8b:9b: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:C1:9E:D1:4B:9E:0C:D9:D0:07:F4:9D:A1:E3:52:90:97:A5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d87302c9-db28-3039-b6ef-9892b8708aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:95:d3:c8:85:9b:90:96:2d:4e:23:d6:2f:88:4f:4b:61:1f: 72:1b:dc:89:2d:42:82:cf:9a:53:19:75:ae:00:1d:b2:73:ac: 33:4c:5d:95:cf:cc:05:4b:2c:2d:2b:22:2b:2b:94:6a:97:37: 64:c5:2a:d5:bf:c2:1e:a0:96:02:01:09:a3:2f:cd:b8:d7:89: f0:60:1d:45:69:aa:47:57:f6:66:81:d8:35:cc:50:62:47:4b: 17:dd:b3:0e:57:3b:5e:20:af:fb:94:f0:39:39:04:6c:3f:56: 71:b8:ca:9a:50:2d:1e:37:9b:b5:64:9e:11:e7:02:06:70:5a: f2:7f:c0:29:f5:67:ed:8e:e5:d4:6a:08:db:a0:da:e6:63:03: 5a:ab:65:a4:41:db:6d:d4:69:c9:c6:ed:31:9a:07:c6:61:05: 96:02:20:4f:2a:e0:9e:e2:4b:84:49:09:3a:ee:ad:db:56:e7: 7a:38:57:57:78:01:b2:d4:0b:04:e0:98:ed:61:0a:49:4c:54: 20:86:fb:7a:25:1c:2e:b7:14:ab:fc:69:a9:eb:eb:10:7a:56: c2:7d:47:42:4b:1b:e3:1c:5a:68:f7:53:78:ad:4c:0d:30:24: 8c:35:ba:31:bc:92:2f:18:5e:d2:b8:76:66:44:4f:5b:c9:01: 36:50:97:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXRf2cvOIr3lnkGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjE4YjA3MjktN2RjZS00NWMwLWFmYTctNTM1YmMyOWU5NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYB2FmsA8p+Kho/bhSVVlcfH3BwMkv1HmP+p KuIx2FZ4JiPSNoK6i6OG5a9g16Yz9kPxhi5s/jeR4Cuj6T/mMMVqGKmDxL3CocvE BG3NB5jRkxqIgOxlHWKm6ayfFeaDR8cYE7EmmgF2+vFGby4Q6Q+dhnKuOcu7ykYO lXsIEXzOq8EMcR/1MfJUPAZuGv6tifCrOP7IAgYlXuLrDwWPGb6F7Qb5S5kgNCkG 9Ym7gwj6BSl+hdSyWVGmP3x+vVxSWwbLyD4tR/o7RrEk4wiQRF8JOvGr2z2oMEqN 1pngWO164kfEjfq3sT92lDdNMy8QwIhLdPyZOat2rttni5vSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhXwZ7RS54M2dAH9J2h41KQl6VhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg3MzAyYzktZGIyOC0z MDM5LWI2ZWYtOTg5MmI4NzA4YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeV08iFm5CWLU4j1i+IT0thH3Ib3IktQoLPmlMZda4AHbJzrDNMXZXP zAVLLC0rIisrlGqXN2TFKtW/wh6glgIBCaMvzbjXifBgHUVpqkdX9maB2DXMUGJH Sxfdsw5XO14gr/uU8Dk5BGw/VnG4yppQLR43m7VknhHnAgZwWvJ/wCn1Z+2O5dRq CNug2uZjA1qrZaRB223UacnG7TGaB8ZhBZYCIE8q4J7iS4RJCTrurdtW53o4V1d4 AbLUCwTgmO1hCklMVCCG+3olHC63FKv8aanr6xB6VsJ9R0JLG+McWmj3U3itTA0w JIw1ujG8ki8YXtK4dmZET1vJATZQl50= -----END CERTIFICATE-----Generated at Sun Mar 1 18:49:13 2026 by rpki-client